Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5399458a-4f04-300d-b824-3ef33412a53d.roa
File:                     5399458a-4f04-300d-b824-3ef33412a53d.roa (raw, json)
Hash identifier:          cc0YndC8gEIvKY5vDU6oUiWOCMDJcGlo4EM7yQb8Qyw=
Subject key identifier:   9B:B9:61:E0:1A:6F:A3:9D:31:3A:5B:04:66:F6:4D:8B:12:C5:BC:E9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABD06CEC217DA15E8DC980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5399458a-4f04-300d-b824-3ef33412a53d.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7015
IP address blocks:        2001:559:807c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:d0:6c:ec:21:7d:a1:5e:8d:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=88e6b169-a329-4025-940c-873f6a0c5d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0c:01:94:7b:af:1c:bd:de:ee:17:4b:7e:bc:
                    be:b4:e6:14:11:d5:55:49:f9:65:8b:96:ca:47:f1:
                    86:55:c6:a6:72:03:c9:4e:1e:36:d4:8e:ca:6c:e7:
                    b5:52:64:e3:50:f7:59:1d:b8:8c:bd:3e:12:ba:0f:
                    be:7e:da:c7:34:80:34:2a:ce:3a:22:62:44:2c:e6:
                    e1:51:98:14:d3:e5:e5:70:70:ea:d2:99:c4:22:58:
                    bc:b6:1c:ce:93:07:c8:3c:e7:04:a9:ba:01:c7:9e:
                    79:95:e6:64:99:44:b0:a1:94:88:fa:dc:60:35:88:
                    53:9d:b7:84:a4:e3:60:0f:d3:3a:61:10:a7:a6:0e:
                    aa:76:20:39:75:01:ae:79:ae:0b:c9:61:59:7c:5c:
                    c9:0e:c1:c2:d4:f6:af:74:7c:78:85:c3:16:03:5d:
                    92:98:d5:16:cd:4a:69:9b:db:02:55:b5:7c:10:22:
                    fa:c5:04:f4:1e:a2:f0:3b:34:18:2a:16:58:31:77:
                    e5:14:a3:b0:1a:e5:2c:2e:d9:46:ed:93:d7:57:bb:
                    df:80:be:e9:50:c8:ae:e6:0c:ac:72:d4:10:77:46:
                    02:9e:64:74:8f:95:0b:24:42:10:c6:91:55:ad:3d:
                    9b:cf:95:b3:4f:ce:95:a1:09:d6:59:73:96:3b:98:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B9:61:E0:1A:6F:A3:9D:31:3A:5B:04:66:F6:4D:8B:12:C5:BC:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5399458a-4f04-300d-b824-3ef33412a53d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:807c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:23:74:8e:5a:50:a3:7b:2f:86:33:89:e2:33:34:99:aa:48:
         f2:d7:bd:b2:69:31:53:a2:cc:d2:56:6b:76:88:cf:83:41:a5:
         9b:3a:2f:49:fa:0f:29:c2:2f:9c:9c:4d:54:71:b0:41:f3:36:
         ad:23:fc:1a:47:6d:da:10:75:aa:74:e4:29:0b:4a:a0:e0:f7:
         0c:03:c8:6c:d9:b6:f0:4e:d5:3b:72:1d:15:05:ed:43:e1:c9:
         5b:c5:57:5c:4e:14:8c:99:06:94:25:50:d0:29:d0:cc:0b:e8:
         c0:68:65:62:be:57:f3:0e:5a:e2:2d:57:ce:b3:8c:9d:ff:ec:
         30:ad:8a:53:81:9f:f5:1c:58:12:5e:03:3f:b4:1e:58:10:f8:
         26:d5:9a:81:a2:db:62:7c:3d:d4:e2:94:8c:1d:bd:40:f9:42:
         3f:cd:eb:89:e6:d0:8d:8a:62:63:6e:56:4c:65:fc:9a:18:c5:
         55:72:30:85:9f:d8:49:e9:ca:30:f1:e4:52:a2:17:9d:ba:6a:
         68:fe:07:43:5b:01:20:57:98:d9:ce:9e:0f:27:49:01:81:7f:
         6e:a1:1e:a1:6e:ac:47:da:f2:5b:81:51:ae:db:fd:ad:64:ce:
         f9:59:a3:8a:f8:83:dc:42:14:2d:d9:2c:f1:b9:af:ac:7d:b1:
         1e:e5:6c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:48:50 2024 by rpki-client on console-fra.rpki-client.org